Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: 8gXIpHFrv+Ksa7CVTQsKQt2RKDLmwN5OBZfKDdkmUz0=
Subject key identifier: A5:2B:80:A0:B4:94:59:52:73:EF:60:E5:58:02:12:7C:94:FE:8B:BC
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 0194BCE06BFB5788FEFD759FBF01CB3C9A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0D63
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: aIJwCisw+FxA7Uen7cyJ5mFILvhLUADnq7j8PzeWSj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6b:fb:57:88:fe:fd:75:9f:bf:01:cb:3c:9a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=a52b80a0b494595273ef60e55802127c94fe8bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:a6:ea:f7:ca:f5:b9:a1:59:6e:de:9f:03:
94:28:8a:23:d7:45:47:22:9d:a2:47:bc:e6:89:42:
8a:d5:5c:cd:41:3a:62:ed:5e:c0:c2:71:3a:85:64:
78:6e:54:d3:2c:1a:c6:d3:0b:26:a1:81:8b:9a:06:
cb:45:20:1a:db:6f:fb:f0:ba:79:ee:3a:6b:bb:12:
04:e4:3c:0b:9c:a0:d6:dd:d6:5c:a6:43:81:fb:ec:
bd:29:90:d0:dd:1e:c5:85:39:83:06:74:58:c4:4b:
08:91:85:64:a3:34:f3:64:5c:f5:98:49:dc:a8:47:
e0:cd:8c:fc:48:08:4b:eb:c1:db:83:cf:e4:46:35:
e5:55:00:55:ce:44:1b:3f:94:b3:81:a8:ff:60:ff:
5b:c1:d8:29:e1:4d:95:a9:cf:11:e6:53:c0:43:4f:
62:a0:1e:9e:ab:67:8b:df:83:79:2e:cb:36:01:40:
7d:91:1d:3b:9b:49:fb:fc:0d:40:81:0e:b7:9a:54:
1a:c1:2c:92:42:f3:3e:dd:03:e9:91:ba:ab:f9:31:
58:84:b7:e6:7d:55:7c:f7:93:1b:73:b3:c6:48:c7:
a1:be:8f:eb:75:1a:c6:d1:a9:15:d1:e5:3f:be:c0:
5b:6b:18:5b:53:f8:f0:ff:f6:ff:e3:71:9a:bf:0d:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:80:A0:B4:94:59:52:73:EF:60:E5:58:02:12:7C:94:FE:8B:BC
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:06:5d:76:fd:2e:8f:49:4c:c1:ab:e8:ac:80:1a:68:40:
b2:40:fe:7d:83:62:c8:eb:60:83:a2:fb:c2:0f:87:e5:76:66:
f7:a2:64:87:5a:b5:05:da:d2:12:ad:9f:06:d7:e0:e0:90:ff:
12:36:d9:50:c1:c1:16:70:b4:66:49:2b:21:d1:bf:52:02:17:
e6:be:f4:90:2c:b0:9d:00:4c:08:81:98:90:1b:49:83:23:b1:
4d:c0:4b:0e:99:c1:e3:de:72:73:ea:5b:3c:f6:1b:4c:6f:70:
49:a4:11:f8:6b:63:15:94:c4:09:c7:45:0e:fa:4f:00:79:0b:
db:50:eb:e9:a3:23:80:ba:fc:c4:f2:92:00:87:18:bb:8d:a4:
52:1f:df:14:79:80:3c:98:76:4f:4e:c0:50:d1:e0:61:f1:4b:
bc:65:18:9f:dc:4f:f3:0d:83:f8:5d:27:35:c6:33:35:43:e8:
72:32:1f:b5:e6:8a:2e:15:e9:ad:98:41:10:b2:b8:ab:97:4e:
92:13:a3:eb:01:6d:ac:71:67:f8:c8:eb:27:0c:51:ba:7a:4c:
fc:8c:07:ef:e1:89:eb:dd:60:a7:0b:28:f0:a2:26:64:f4:58:
da:47:3e:84:1f:19:5b:63:bb:4a:62:51:68:0e:58:b1:e7:c6:
78:0c:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:28 2025 by rpki-client